Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/81e8c4c6ce94897960f84f25c979f4c39e941a73.roa
File:                     81e8c4c6ce94897960f84f25c979f4c39e941a73.roa (raw, json)
Hash identifier:          eh9rdYQJ5rTvMedt9wrHbdCVuX+hlU3Jf2S8gzOf5Ps=
Subject key identifier:   BE:E3:DC:D7:D8:2D:1A:C6:93:32:50:91:C5:48:33:D2:A5:5F:2D:EB
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05041A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/81e8c4c6ce94897960f84f25c979f4c39e941a73.roa
Signing time:             Sat 19 Mar 2022 05:20:44 +0000
ROA not before:           Sat 19 Mar 2022 03:00:00 +0000
ROA not after:            Sun 19 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328730 (0x5041a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 19 03:00:00 2022 GMT
            Not After : Mar 19 03:00:00 2023 GMT
        Subject: CN=81e8c4c6ce94897960f84f25c979f4c39e941a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:3b:af:d9:2b:99:ba:a5:4c:03:73:7a:d2:
                    da:69:10:25:fe:3c:dd:fa:8b:e5:62:ca:26:fd:d5:
                    f2:ae:f1:f8:88:86:7f:42:42:c3:94:43:e1:e0:18:
                    0b:ad:55:3b:a6:2d:0d:ac:fe:12:e7:40:3e:d2:37:
                    7e:61:aa:63:72:3e:d2:47:2c:40:40:4f:02:4e:30:
                    c1:64:a8:2d:a6:92:1e:22:2d:af:6b:35:47:56:bb:
                    7d:a9:0b:c8:f6:6c:b1:ec:a9:70:4f:9a:07:1a:42:
                    97:04:e6:28:c4:ca:6c:df:2e:16:47:53:38:27:e6:
                    40:d9:4c:e4:88:74:29:fe:61:9d:7f:5d:86:c3:0d:
                    af:2d:60:47:8f:8e:c9:4b:43:37:0c:19:29:77:7e:
                    5d:75:8d:ff:3d:7d:8a:8b:0b:cf:55:f2:6c:c7:d0:
                    75:71:ae:4e:40:d3:da:e3:09:9b:a1:65:e4:b7:f7:
                    f7:0f:71:a7:a8:b9:17:f8:a7:a8:ee:9b:71:6c:3c:
                    65:8e:e8:33:8f:b1:44:d8:64:9e:23:18:6a:b1:47:
                    ee:d1:8b:d8:03:67:f4:fa:e3:f2:df:3d:1f:c8:c5:
                    81:3d:f7:ab:9d:ff:e1:20:e8:c5:3b:b4:a0:5d:04:
                    d9:11:43:c7:90:fd:a6:81:5c:70:23:02:2b:31:b3:
                    13:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E3:DC:D7:D8:2D:1A:C6:93:32:50:91:C5:48:33:D2:A5:5F:2D:EB
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/81e8c4c6ce94897960f84f25c979f4c39e941a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:2a:37:6f:a7:3d:f8:1c:68:8c:33:6a:5d:95:44:81:c7:
         03:d9:4f:11:c2:d8:9d:34:d0:e6:0d:68:ae:ca:ca:55:ea:67:
         1f:91:2b:9d:37:96:7e:22:d6:93:d0:cd:e0:c1:78:c0:5a:a3:
         89:1d:f0:27:52:e9:e3:07:e5:bd:0e:c0:20:45:21:c1:f3:50:
         e7:24:4f:cb:ee:a4:8e:d3:5d:68:f8:9e:e7:f1:e7:e0:33:09:
         a8:26:7c:53:cb:29:5c:3a:66:a2:94:14:e0:fb:74:b0:08:57:
         68:c0:b0:d6:63:97:a3:f5:c8:c5:c7:59:0a:b1:5f:1f:82:79:
         44:04:bf:98:b8:44:44:dd:2d:6e:9b:c0:95:60:7a:ad:a8:0b:
         8f:00:95:88:d3:42:f4:64:2f:1e:d6:85:b3:15:68:4f:d5:45:
         e0:6d:db:c8:06:dd:9f:3d:04:18:52:7e:66:ca:cc:d1:09:79:
         dd:70:55:7c:da:70:46:04:2a:5f:df:f0:27:0c:09:a1:e7:2d:
         9f:ac:98:80:58:a4:f8:78:8c:4e:ec:f5:9c:63:a5:29:5c:b0:
         ca:8f:a5:86:30:5d:e0:30:a5:30:b7:af:0f:32:80:a0:8d:63:
         85:d8:18:2e:74:8c:4c:2b:5c:fd:d9:ce:36:4c:63:a5:e5:ab:
         bd:cb:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----